Skip to content

Instantly share code, notes, and snippets.

@linuxmalaysia

linuxmalaysia/rsyslog-logstash.conf

Created March 25, 2019 01:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save linuxmalaysia/703b65c9b6ad216b373dc2786ef821a0 to your computer and use it in GitHub Desktop.
Save linuxmalaysia/703b65c9b6ad216b373dc2786ef821a0 to your computer and use it in GitHub Desktop.
Download ZIP
Config for rsyslog in /etc/rsyslog.d or rsyslog.conf and named it rsyslog-logstash.conf
Raw
rsyslog-logstash.conf
# Setup disk assisted queues
# Disable rate limit
$SystemLogRateLimitInterval 0
$SystemLogRateLimitBurst 0
$WorkDirectory /var/spool/rsyslog # where to place spool files
$ActionQueueFileName fwdRule21 # unique name prefix for spool files
$ActionQueueMaxDiskSpace 10g # 10gb space limit (use as much as possible)
$ActionQueueType Disk # run in disk
$ActionResumeRetryCount -1 # infinite retries if host is down
*.* @@ipserverelk:port
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment